Vulnerabilities

TI-2025-10821 CVE-2025-11804 · GHSA-rmj3-h332-673q

JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 28

The JB News Ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the 'jbticker' shortcode in all versions up to, and including, 1.0.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00291 Published 2025-10-22 No fix listed CWE-79

TI-2025-17597 CVE-2025-23830 · GHSA-52jw-qmc5-22p9

WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jobair JB Horizontal Scroller News Ticker jb-horizontal-scroller-news-ticker allows DOM-Based XSS.This issue affects J…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-16 No fix listed CWE-79

Vulnerabilities

Filters

JB News Ticker <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

WordPress JB Horizontal Scroller News Ticker plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability